Skip to main content

stablecoin-info-fetch

Fetches and verifies detailed metadata for stablecoins, ensuring accuracy in collateral, peg mechanisms, and jurisdictional information.

Install this skill

or
91/100

Security score

The stablecoin-info-fetch skill was audited on May 13, 2026 and we found 9 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

low line 35

External URL reference

SourceSKILL.md
35- **CoinGecko**: `https://api.coingecko.com/api/v3/coins/{geckoId}` — returns contract addresses (with decimals via `detail_platforms`), links, categories, description, all in structured JSON. Use `ht
low line 37

External URL reference

SourceSKILL.md
37- Ethereum: `https://api.etherscan.io/api?module=token&action=tokeninfo&contractaddress={addr}`
low line 38

External URL reference

SourceSKILL.md
38- Arbiscan: `https://api.arbiscan.io/api?module=token&action=tokeninfo&contractaddress={addr}`
low line 39

External URL reference

SourceSKILL.md
39- BaseScan: `https://api.basescan.org/api?module=token&action=tokeninfo&contractaddress={addr}`
low line 41

External URL reference

SourceSKILL.md
41- **DefiLlama**: `https://stablecoins.llama.fi/stablecoin/{id}` — chain-level supply breakdown, no auth needed
low line 58

External URL reference

SourceSKILL.md
58- **DefiLlama chain data**: `WebFetch` `https://stablecoins.llama.fi/stablecoin/{id}` (for numeric IDs) to get chain-level supply breakdown. If DL reports supply on a chain we don't have a contract fo
low line 60

External URL reference

SourceSKILL.md
601. `WebFetch` `https://api.coingecko.com/api/v3/search?query={symbol}` — find/confirm the geckoId by matching on name+symbol in the results
low line 61

External URL reference

SourceSKILL.md
612. `WebFetch` `https://api.coingecko.com/api/v3/coins/{geckoId}?localization=false&tickers=false&market_data=false&community_data=false&developer_data=false` — get contract addresses (use the `detail_
low line 70

External URL reference

SourceSKILL.md
70- **Block explorer APIs for verification**: For every contract address found from any source, verify via the explorer API that the token name, symbol, and decimals match. This prevents adding a proxy
Scanned on May 13, 2026
View Security Dashboard
Installation guide →